We are running a PHP application on a linux apache webserver.
How can we secure the server, so if someone finds a hole in our application, they can only get access to the application (Files inside the www folder) and not rest of the server?
How to secure for running commands like: exec('/usr/sbin/adduser –p password test')
What about read-access to config-files, log files?
/Jacob